The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
167 vulnerabilities with CWE-204
CVE-2025-67500
LOW
Mastodon <4.2.27, <4.3.0-beta.1-4.3.14, <4.4.0-beta.1-4.4.9, <4.5.0...
CVSS 3.7
CVE-2025-40806
MEDIUM
Gridscale X Prepay <V4.2.1 - Info Disclosure
CVSS 5.3
CVE-2025-65899
MEDIUM
Kalmia 0.2.0 - Unauthenticated User Enumeration via Authentication Error Messages
CVSS 5.3
CVE-2025-12994
MEDIUM
Medtronic CareLink Network <December 4, 2025 - Info Disclosure
CVSS 5.3
CVE-2025-66307
MEDIUM
Grav <1.11.0-beta.1 - Info Disclosure
CVSS 6.5
CVE-2025-59116
MEDIUM
Windu CMS 4.1 - User Enumeration via Login Error Message Discrepancy
CVSS 5.3
CVE-2025-25236
MEDIUM
Omnissa Workspace ONE UEM - Info Disclosure
CVSS 5.3
CVE-2025-62236
MEDIUM
Frontier Airlines - Info Disclosure
CVSS 5.3
CVE-2025-34155
MEDIUM
Tibbo AggreGate Network Manager < 6.40.05 - Info Disclosure
CVE-2025-34255
MEDIUM
D-Link Nuclias Connect <=1.3.1.4 - Info Disclosure
CVSS 5.3
CVE-2025-34254
MEDIUM
D-Link Nuclias Connect <=1.3.1.4 - Info Disclosure
CVSS 5.3
CVE-2025-61907
MEDIUM
Icinga 2.4-2.15.0 - Authenticated Information Disclosure via Filter Expression
CVSS 6.5
CVE-2025-61789
MEDIUM
Icinga DB Web <1.1.4-1.2.3 - Info Disclosure
CVSS 5.3
CVE-2025-42903
MEDIUM
SAP Financial Service Claims Management - Info Disclosure
CVSS 4.3
CVE-2025-58586
MEDIUM
Sick Analytics Products - Username Enumeration via Different Error Messages
CVSS 5.3
CVE-2025-56764
MEDIUM
Trivision NC-227WF <5.80 - Info Disclosure
CVSS 5.3
CVE-2025-58442
MEDIUM
Saleor 3.21.0-3.21.15 - User Enumeration via accountRegister Response Discrepancy
CVSS 5.3
CVE-2025-9824
MEDIUM
Mautic Core 4.4.0-4.4.16, 5.0.0-alpha-5.2.7, 6.0.0-alpha-6.0.4 - User Enumeration via Timing Discrepancy
CVSS 5.9
CVE-2025-9109
LOW
Portabilis i-Diario <1.5.0 - Info Disclosure
CVSS 3.7
CVE-2025-46390
HIGH
Emby/MediaBrowser 4.9.0.35 - Observable Response Discrepancy
CVSS 7.5
CVE-2025-54834
MEDIUM
OPEXUS FOIAXpress PAL <11.1.0 - Info Disclosure
CVSS 5.3
CVE-2025-52899
MEDIUM
Tuleap <16.9.99.1750843170, <16.8-4, <16.9-2 - Info Disclosure
CVSS 5.3
CVE-2025-54129
MEDIUM
HAXiam < 11.0.5 - Authenticated User Enumeration via Response Discrepancy
CVSS 4.3
CVE-2025-27451
MEDIUM
Endress meac300-fnade4 Firmware <= 0.16.0 - Username Enumeration via Different Error Messages
CVSS 5.3
CVE-2025-3092
HIGH
Unprotected Endpoint - Info Disclosure
CVSS 7.5
Details
Vulnerabilities
167